Blame SOURCES/0038-gssapi-default-pam_gssapi_services-to-NULL-in-domain.patch

bac598
From cc173629f30fbc885ee90e52a205554b118e0ee6 Mon Sep 17 00:00:00 2001
bac598
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
bac598
Date: Mon, 11 Jan 2021 13:11:39 +0100
bac598
Subject: [PATCH 38/39] gssapi: default pam_gssapi_services to NULL in domain
bac598
 section
bac598
bac598
We need to distinguish when the option is not set in domain section and when
bac598
it is is explicitly disabled. Now if it is not set, domain->gssapi_services
bac598
is NULL and we'll use value from the pam section.
bac598
bac598
Without this change, the value in the pam section is ignored.
bac598
bac598
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
bac598
Reviewed-by: Sumit Bose <sbose@redhat.com>
bac598
---
bac598
 src/confdb/confdb.c | 2 +-
bac598
 1 file changed, 1 insertion(+), 1 deletion(-)
bac598
bac598
diff --git a/src/confdb/confdb.c b/src/confdb/confdb.c
bac598
index 2881ce5da..befcfff2d 100644
bac598
--- a/src/confdb/confdb.c
bac598
+++ b/src/confdb/confdb.c
bac598
@@ -1582,7 +1582,7 @@ static int confdb_get_domain_internal(struct confdb_ctx *cdb,
bac598
     }
bac598
 
bac598
     tmp = ldb_msg_find_attr_as_string(res->msgs[0], CONFDB_PAM_GSSAPI_SERVICES,
bac598
-                                      "-");
bac598
+                                      NULL);
bac598
     if (tmp != NULL) {
bac598
         ret = split_on_separator(domain, tmp, ',', true, true,
bac598
                                  &domain->gssapi_services, NULL);
bac598
-- 
bac598
2.21.3
bac598